review.opendev.org SSH key change?

Sorin Sbarnea ssbarnea at redhat.com
Mon Sep 14 12:00:58 UTC 2020


I am in favor of doing a key sync as this would be the least intrusive for the user point of view.


Having the SSHFP is a good measure and improves security far more than the issue of having the key synchronized. 


On 1 Aug 2020, at 15:09, Jeremy Stanley <fungi at yuggoth.org> wrote:
> 
> An alternative would be to sync the Gerrit mina-sshd API and system
> OpenSSH host keys, though that could present a degradation of
> security for the base system (maybe effectively not one we care
> about though?).




More information about the service-discuss mailing list